Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/34352e352e3139362e302f32322d3332203d3e20323636313035.roa
File:                     34352e352e3139362e302f32322d3332203d3e20323636313035.roa (raw, json)
Hash identifier:          5lA2PbnhrMvRnNmIwXQrYnoSNdca+jB/7p+eqefGtHI=
Subject key identifier:   5B:D2:64:F7:2E:11:BD:AE:D5:20:46:11:44:EB:2B:E5:FF:A1:6F:73
Certificate issuer:       /CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
Certificate serial:       1DC14C9505BC82794F4E2660DFAF35B869381213
Authority key identifier: BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/34352e352e3139362e302f32322d3332203d3e20323636313035.roa
Signing time:             Thu 04 Apr 2024 04:17:42 +0000
ROA not before:           Thu 04 Apr 2024 04:12:42 +0000
ROA not after:            Thu 03 Apr 2025 04:17:42 +0000
asID:                     266105
IP address blocks:        45.5.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c1:4c:95:05:bc:82:79:4f:4e:26:60:df:af:35:b8:69:38:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
        Validity
            Not Before: Apr  4 04:12:42 2024 GMT
            Not After : Apr  3 04:17:42 2025 GMT
        Subject: CN=5BD264F72E11BDAED520461144EB2BE5FFA16F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:80:ac:06:ad:b1:a3:19:3d:88:ef:37:be:
                    68:df:1e:37:ee:7f:e6:e2:4b:9c:40:e0:8b:25:f3:
                    de:76:9c:95:97:3e:c5:3f:f8:50:d1:47:77:96:72:
                    cf:d5:fb:9b:37:97:04:f6:f3:52:ce:bb:89:42:93:
                    30:dc:f3:0d:2d:83:0e:c3:1b:db:51:8b:73:91:f5:
                    2b:da:18:2e:c7:4f:68:61:22:29:f0:99:28:e9:11:
                    77:27:d2:4b:0c:fc:16:1c:b2:bf:62:d6:75:3e:da:
                    00:63:3c:29:ce:c2:2b:1f:00:97:7b:8f:5e:b4:22:
                    11:7a:b8:d8:4d:ad:00:fa:b1:89:5e:cb:26:5e:ee:
                    9e:57:85:48:f2:70:17:e2:55:71:51:88:44:33:11:
                    b9:f0:ec:cf:f3:55:83:7b:53:9c:91:3e:3f:7c:ed:
                    47:17:24:9e:84:9f:02:50:85:0e:57:dc:83:0b:02:
                    9e:12:76:a5:30:89:ce:62:bb:34:7d:3f:49:7b:95:
                    69:47:0f:bf:79:44:42:7d:c8:18:24:9d:a4:bc:0a:
                    db:23:f6:0a:94:39:30:5c:2c:0c:84:b1:25:43:09:
                    b6:8d:4f:67:ff:dd:ec:d4:f7:23:36:e3:cf:53:69:
                    fe:16:fe:e1:d3:d9:bc:bf:9f:ac:19:36:b2:8d:4f:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D2:64:F7:2E:11:BD:AE:D5:20:46:11:44:EB:2B:E5:FF:A1:6F:73
            X509v3 Authority Key Identifier:
                keyid:BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/34352e352e3139362e302f32322d3332203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:2f:10:53:0b:8e:a3:cd:18:09:a0:74:a7:9c:4e:18:84:
         a1:c5:77:fb:b3:06:bd:00:b4:fc:76:03:6e:54:a0:ba:d9:3d:
         78:9e:72:96:32:b5:0e:04:a1:e4:47:62:19:47:15:ad:73:46:
         a8:ca:08:34:f4:95:76:c2:3f:22:ab:9c:6a:84:0c:dc:d5:e9:
         19:9f:d4:29:7c:9b:4a:4c:8a:62:4c:7d:fd:bf:7b:60:8c:22:
         f1:8e:b3:6b:ae:fe:36:1a:a9:f1:7c:d3:09:1b:bb:2e:d0:3d:
         65:26:0e:5e:97:d8:b0:ba:ab:1e:82:69:02:49:e3:0b:f6:57:
         5e:55:a5:2a:7f:56:ba:bf:4f:8a:04:b1:1a:11:e8:b8:d6:a6:
         da:fc:08:46:d2:78:9c:fe:ce:d6:fc:67:05:77:5e:b0:35:67:
         16:08:5d:23:fc:bb:4b:a6:0c:94:75:64:1c:f5:ff:04:2b:c6:
         c4:7f:9d:9f:41:d9:61:bc:c1:25:aa:4d:33:ea:de:81:0d:02:
         5a:a0:f7:7c:f0:76:8b:2a:46:e1:49:38:24:65:04:80:04:ca:
         2b:1d:77:80:9b:1e:d4:ea:88:2b:32:81:a3:73:a8:c1:ab:ba:
         98:d7:71:ed:c5:2b:e6:2a:96:2a:14:9f:5b:98:fb:64:3e:6d:
         11:6d:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org